Forum Discussion

Brass Contributor

Jun 19, 2020

"O365 Suite EX" and "Office365 Shell WCSS-Client" Compromised

Hi, I noticed the following Sign-in events originating from Nigeria, which is not the user location. Seems like something is compromised. Can I know what is the "O365 Suite UX" and "Of...

Azure Active Directory (AAD)

waseem

Copper Contributor

May 25, 2022

“Office 365 Shell WCSS-Client is the browser code that runs whenever a user navigates to (most) Office365 applications in the browser. The shell, also known as the suite header, is shared code that loads as part of almost all Office365 workloads, including SharePoint, OneDrive, Outlook, Yammer, and many more.
https://www.jasonfritts.me/2019/01/05/what-is-office-365-shell-wcss-client/

Potter4U

Copper Contributor

Oct 25, 2023

waseem this doesn’t give any proof about the phishing email or says anything about compromised. This just gives definition of the Office365 shell; I believe no one understands the meaning of this alert.